Django REST Framework – Separate permissions per methods

by

Permissions are applied to the entire View class, but you can take into account aspects of the request (like the method such as GET or POST) in your authorization decision.

See the built-in IsAuthenticatedOrReadOnly as an example:

SAFE_METHODS = ['GET', 'HEAD', 'OPTIONS']

class IsAuthenticatedOrReadOnly(BasePermission):
    """
    The request is authenticated as a user, or is a read-only request.
    """

    def has_permission(self, request, view):
        if (request.method in SAFE_METHODS or
            request.user and
            request.user.is_authenticated()):
            return True
        return False

Related Contents:

  1. Pass extra arguments to Serializer Class in Django Rest Framework
  2. How do I create a login API using Django Rest Framework?
  3. Django REST Framework serializer field required=false
  4. Django Rest-Framework nested serializer order
  5. Django REST Framework POST nested objects
  6. Django-Rest-Framework. Updating nested object
  7. How do I include related model fields using Django Rest Framework?
  8. Disable a method in a ViewSet, django-rest-framework
  9. django.db.migrations.exceptions.InconsistentMigrationHistory
  10. Django Rest Framework – Could not resolve URL for hyperlinked relationship using view name “user-detail”
  11. Django Rest Framework – Authentication credentials were not provided
  12. Django Rest Framework File Upload
  13. When to use Serializer’s create() and ModelViewset’s perform_create()
  14. Retrieving a Foreign Key value with django-rest-framework serializers
  15. Django rest framework serializing many to many field
  16. Python Django Rest Framework UnorderedObjectListWarning
  17. TemplateDoesNotExist – Django Error
  18. Django Rest Framework – How to add custom field in ModelSerializer
  19. Django Rest Framework partial update
  20. DRF: Simple foreign key assignment with nested serializers?
  21. Django Rest Framework Token Authentication
  22. What is the benefit of using a HyperlinkedModelSerializer in DRF?
  23. Return the current user with Django Rest Framework
  24. Django Rest Framework: turn on pagination on a ViewSet (like ModelViewSet pagination)
  25. Add a non-model field on a ModelSerializer in DRF 3
  26. django-rest-framework 3.0 create or update in nested serializer
  27. How to return custom JSON in Django REST Framework
  28. Django REST Framework upload image: “The submitted data was not a file”
  29. Django serializer Imagefield to get full URL
  30. How can I register a single view (not a viewset) on my router?
  31. How to get a list of all users with a specific permission group in Django
  32. How can I use Django OAuth Toolkit with Python Social Auth?
  33. Django Rest Framework POST Update if existing or create
  34. CSRF validation does not work on Django using HTTPS
  35. Editing django-rest-framework serializer object before save
  36. Django Rest Framework – Get related model field in serializer
  37. How to add custom field in ModelSerializer?
  38. Django Test Client Method Override Header
  39. Django Rest Framework writable nested serializers
  40. Why does Django Rest Framework discourage model level validation?
  41. Django Python rest framework, No ‘Access-Control-Allow-Origin’ header is present on the requested resource in chrome, works in firefox
  42. How to update user password in Django Rest Framework?
  43. How to PATCH a single field using Django Rest Framework?
  44. how to add annotate data in django-rest-framework queryset responses?
  45. Adding REST to Django [closed]
  46. Dynamically limiting queryset of related field
  47. mysql error : ERROR 1018 (HY000): Can’t read dir of ‘.’ (errno: 13)
  48. Django Serializer Method Field
  49. How to display all model fields with ModelSerializer?
  50. Django viewset has not attribute ‘get_extra_actions’

Leave a Comment